Validate a password by reporting which rules failed.
Build a small password validator. Each rule should live in its own function, and the final validator should report which rules failed.